CVE-2013-0945 | BDVDB-2026-55708 Detail

Description#

EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12013-05-03Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.